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Top Stories 

• Community Health Systems Inc., agreed to pay $98.15 million in a settlement with federal 
officials August 4 to resolve several lawsuits alleging the company knowingly billed 
government health care programs for inpatient services that should have been billed as 
observation or outpatient services. - U.S. Department of Justice (See item 18 ) 

• Researchers with Hold Security found that a Russian cybercrime group was able to collect 
1.2 billion unique credentials from the Web sites of a wide variety of large and small 
businesses, as well as over 500 million email address credentials. - Softpedia (See item 22 ) 

• Federal and State authorities arrested and charged 16 individuals in connection with a retail 
theft ring that allegedly stole millions of dollars’ worth of high-end merchandise from 16 
Evansville, Indiana retailers. - WRTV 6 Indianapolis (See item 29 ) 

• The U.S. Army Corps of Engineers announced August 4 that it will disclose the amount of 
pollutants being released into waterways among 8 dams in Oregon and Washington to 
settle claims that they violated the Clean Water Act. - Associated Press (See item 35 ) 
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Energy Sector 



1. August 6, Pittsburgh Post-Gazette - (Pennsylvania) State: Fracking waste tainted 
groundwater, soil at three Washington County sites. The Pennsylvania Department 
of Environmental Protection issued a violation notice to one Range Resources-owned 
impoundment site in Washington County and is increasing monitoring and testing at 
another site after leaks of fracking waste water were found at three impoundment sites 
which have contaminated soil and groundwater. Officials notified residents of their 
findings and assured the public that there was no potential contamination. 

Source: http://www.post-gazette.com/local/washington/2014/08/Q6/Pa-finds-tainted- 
water-soil-at-three-Washington-County-shale-sites/stories/201408050198 

2. August 5, U.S. Department of Labor - (Oklahoma) OSHA follow-up inspection of 
Oklahoma oil refinery reveals continuing worker safety violations. The 
Occupational Safety and Health Administration cited Holly Refining & Marketing- 
Tulsa LLC August 5 for 3 serious and 5 repeat violations for continuing to expose 
workers to hazards at its crude oil refinery in Oklahoma. Proposed penalties totaled 
$184,800. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26484 

3. August 4, New Orleans Times -Picayune - (Louisiana) At Norco bio-diesel plant, tank 
fire extinguished and all-clear signal given. An August 3 fire at the Diamond Green 
Biodiesel plant in Norco was extinguished and officials cleared the scene after an 
explosion of a production tank, which caused the unit to shut down indefinitely. 
Authorities are investigating the cause of the explosion. 

Source: 

http://www.nola.com/traffic/index.ssf/2014/08/tank fire extinguished at st c.html 
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Chemical Industry Sector 

See item 25 
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Nuclear Reactors, Materials, and Waste Sector 

4. August 4, Nuclear Street - (Missouri) New well at Callaway nuclear plant reveals 
tritium, cobalt-60. The operators of the Callaway nuclear power plant in Missouri 
notified the U.S. Nuclear Regulatory Commission that a new monitoring well on the 
facility grounds detected tritium and cobalt-60 at levels above drinking water limits. 
The operators scheduled additional testing and stated that the contamination did not 
affect drinking water or affect the public or plant employees. 

Source: 
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http://nuclearstreet.com/nuclear power industry news/b/nuclear power news/archive/ 
2014/08/04/new-well-at-callaway-nuclear-plant-reveals-tritium 2c00 - 
cobalt 2d00 60-080402.aspx 
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Critical Manufacturing Sector 

See item 25 
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Defense Industrial Base Sector 

See item 25 
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Financial Services Sector 

5. August 6, Securityweek - (International) PayPal confirms new two-factor 
authentication bypass issue. Researchers with Escalate Internet identified a way to 
bypass PayPal’s two-factor authentication (2FA) mechanism with companies that use 
Adaptive Payments, as the method Adaptive Payments uses to connect PayPal accounts 
to the application only requires a login and password with no 2FA. PayPal stated that 
they are aware of the issue and working on a fix. 

Source: http://www.securitvweek.com/pavpal-confirms-new-two-factor-authentication- 
bypass -is sue 

6. August 6, Houston Business Journal - (Texas) SEC charges Houston energy 
company and CEO with fraud. The U.S. Securities and Exchange Commission (SEC) 
issued a cease and desist order against Houston-based Houston American Energy 
Corp., and its chief executive officer for allegedly making fraudulent claims to 
investors in order to raise around $13 million in a public offering between 2009 and 
2010. The SEC also charged a stock promoter and his firm, Undiscovered Equities Inc., 
with allegedly helping publicize the misleading claims. 

Source: http://www.biziournals.com/houston/morning call/20 14/08/sec-charges- 
houston-energy-companv-and-ceo-with.html 

7. August 5, New York Times - (National) Federal Reserve and F.D.I.C. fault big 
banks’ ‘living wills’. The Federal Reserve and Federal Deposit Insurance Corporation 
(FDIC) sent letters to 1 1 major banks August 5 stating that the agencies had found 
required plans for winding down the major banks in the event of a financial crisis were 
inadequate due to unrealistic assumptions and other issues. The two agencies demanded 
that the plans submitted for 2015 contain improvements to resolve the issues. 

Source: http://dealbook.nvtimes.com/2014/08/05/federal-reserve-and-f-d-i-c-fault-big- 
banks-living- wills/ 



- 3 - 



8. August 5, U.S. Attorney’s Office, Eastern District of Virginia - (Maryland; 

Washington, D C.) Baltimore man pleads guilty in identity theft and credit card 
fraud ring. A Baltimore man pleaded guilty August 5 to conspiracy to commit access 
device fraud for his role in an identity theft and payment card fraud ring that operated 
in the Baltimore and Washington, D.C. region that involved around 250 victims and the 
theft of at least $200,000. Three others involved in the fraud ring previously pleaded 
guilty for their roles in the conspiracy. 

Source: http ://w w w .fbi . go v/washingtondc/pres s-releases/20 1 4/baltimore-man-pleads- 
guilty-in-identity-theft-and-credit-card-fraud-ring 
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Transportation Systems Sector 

9. August 6, WALA 10 Mobile - (Alabama) 1 dead, 4 rescued from water in General 
WK Wilson Jr. Bridge accident. A portion of southbound Interstate 65 was shut down 
for 3 hours after a vehicle flipped over the General K Wilson Jr. Bridge in Mobile 
August 5 and landed in the water. One person was killed in the accident and four others 
were rescued from the water. 

Source: http ://fox 1 Otv . com/20 1 4/08/05/1 -fatality-4-rescued-from- water-in- general-k- 
wilson-jr-bridge-accident/ 

10. August 5, San Francisco Bay City News - (California) BART resumes service after 
no explosive device found on AC Transit Bus at West Oakland Station. The Bay 
Area Rapid Transit (BART) resumed service at the West Oakland BART station in 
Alameda County after closing for about 2 hours due to a bomb threat on an Alameda- 
Contra Costa Transit bus August 5. A bomb squad cleared the scene after no suspicious 
devices were found. 

Source: http://www.nbcbayarea.com/news/local/Suspicious-Obiect-on-AC-Transit- 
Bus-Closes-West-Oakland-BART-Station-270093741.html 



11. August 5, Baltimore Sun - (Maryland) Train strikes vehicle in Rosedale where 
explosion occurred last year. A CSX Transportation train struck a garbage truck 
August 5 at a railroad crossing in Rosedale prompting a 2-hour closure of the track 
while crews investigated and cleared the scene. 

Source: http://articles.bahimoresun.com/2014-08-05/news/bs-md-co-train-collision- 
rosedale-20 140805 1 john-alban-jr-railroad-crossing-truck-driver 
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Food and Agriculture Sector 

12. August 6, Associated Press - (Wisconsin) Grassland Dairy Products to pay $300,000 
to Wisconsin for water pollution violations. Wisconsin authorities ordered Grassland 
Dairy Products Inc., of Greenwood to pay $300,000 in penalties August 5 to resolve 
allegations that the butter producer discharged water pollutants exceeding legal limits 
into the Black River more than 100 times between 2006 and 2013 and only reporting 3 
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of those incidents. 

Source: http://www.startribune.com/local/270112971.html 



13. August 5, U.S. Department of Labor - (Ohio) Anheuser-Busch brewery in 
Columbus, Ohio, cited for refrigeration system violations. The Occupational Safety 
and Health Administration cited Anheuser-Busch Cos. LLC, August 5 for 2 repeat and 
8 serious safety violations following a February inspection of an ammonia refrigeration 
system inside the company’s Columbus facility. Proposed penalties total $92,400. 
Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26487 

14. August 5, U.S. Food and Drug Administration - (National) Seoul Shik Poom Inc. 
issues allergy alert on undeclared eggs in Choripdong Chocolate Almond 
Richmond Ice Bar. The U.S. Food and Drug Administration announced August 5 that 
Seoul Shik Poom Inc. of Englewood, New Jersey, issued a recall for packages of its 
Choripdong Chocolate Almond Richmond Ice Bar products due to undeclared eggs. 
The products were distributed through retail stores nationwide. 

Source: http://www.fda.gov/Safetv/Recalls/ucm408027.htm 

15. August 4, U.S. Food and Drug Administration - (Florida; North Carolina; Virginia) 
Oasis Brands, Inc recalls Quesito Casero 12oz because of possible health risk. The 
U.S. Food and Drug Administration announced August 4 that Miami-based Oasis 
Brands, Inc. issued a recall for 12-ounce containers of its Quesito Casero due to 
possible Listeria monocytogenes contamination. The product was distributed through 
retail stores in North Carolina and Virginia. 

Source: http://www.fda.gov/Safety/Recalls/ucm407927.htm 

16. August 4, U.S. Department of Labor - (Georgia) Rochelle, Georgia, peanut 
processing plant cited for serious safety violations following US Department of 
Labor OSHA investigation. The Occupational Safety and Health Administration cited 
McCleskey Mills Inc., for 28 safety and health violations after a February inspection of 
the company’s Rochelle peanut process facility revealed fall and amputation risks to 
workers amongst other safety hazards. Proposed penalties total $72,553. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=26475 

For additional stories, see items 3 and 33 
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Water and Wastewater Systems Sector 

17. August 5, KARE 11 Minneapolis - (Minnesota) 20,000 gallons of sewage spills into 
Rum River. A backed- up 14-inch sewer main at the under construction Cambridge 
Wastewater Treatment Facility in Minnesota caused an estimated 20,000 gallons of raw 
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sewage to spill into the Rum River August 4. The plant ordered a replacement of 
temporary sewage pumps which appeared to clear the clog and fix the issue. 
Source: http://www.karell.com/storv/news/local/2014/08/Q5/2000Q-gallons-of- 
sewage-spills-into-rum-river/1 362300 1/ 

For additional stories, see items 33 and 35 
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Healthcare and Public Health Sector 

18. August 4, U.S. Department of Justice - (National) Community Health Systems Inc. to 
pay $98.15 million to resolve False Claims Act allegations. Tennessee-based 
Community Health Systems Inc., agreed to pay $98.15 million in a settlement with the 
U.S. Department of Justice August 4 to resolve several lawsuits alleging the company 
knowingly billed government health care programs for inpatient services that should 
have been billed as observation or outpatient services from 2005 to 2010. The 
settlement also resolves allegations that Laredo Medical Center, an affiliated hospital, 
improperly billed the Medicare program for certain inpatient procedures and for 
services rendered to patients in violation of the Physician Self-Referral Law. 

Source: http://www.iustice.gov/opa/pr/2014/August/14-civ-822.html 

For another story, see item 25 
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Government Facilities Sector 

19. August 5, Utah County Daily Herald - (Utah) Police: BYU student hacked into 
school computers to change grades. A Brigham Young University student was 
arrested and charged after allegedly confessing to police that he breached the Utah 
university’s cyber security remotely to change his student status, illegally accessed a 
professor’s computer and other staff members’ computers to obtain logins and 
passwords in order to modify grades, and downloaded pages of personal information 
belonging to students without authorization. 

Source: http://www.heraldextra.com/news/local/crime-and-courts/police-bvu-student- 
hacked-into-school-computers-to-change-grades/article Id68bda3-able-5ecb-a7ce- 
6757c8bda858.html 



20. August 5, Daily News of Batavia - (New York) Flea infestation closes Orleans 
courthouse Monday, Tuesday. An infestation of fleas prompted the closure of the 
Orleans County Courthouse in Albion August 4 and August 5 while crews worked to 
remove the fleas and remedy the infestation. Officials planned to reopen the courthouse 
August 6. 

Source: http://www.thedailvnewsonline.com/news/article 20979e2e-lbe3-lle4-9b72- 
Q01a4bcf887a.html 
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For additional stories, see items 18 and 27 
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Emergency Services Sector 

21. August 5, WPIX 11 New York City - (New York) Drunken woman wearing stolen 
python slams in LI firehouse: cops. A drunken driver with a stolen snake around her 
neck, stolen from PETCO, was arrested and charged after crashing into the garage of 
the New Hyde Park Fire House in Long Island August 4, damaging two fire engines. 
Source: http://pixll.com/2014/08/05/drunk-woman-wearing-stolen-snake-drives-into- 
li-firehouse-cops/ 

For another story, see item 27 
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Information Technology Sector 

22. August 6, Softpedia - (International) 1.2 billion unique credentials, 500 million 
email addresses stolen by Russian cyber gang. Researchers with Hold Security 
found that a Russian cybercrime group dubbed “CyberVor” was able to collect 1.2 
billion unique credentials from the Web sites of a wide variety of large and small 
businesses, as well as over 500 million email address credentials. The researchers 
reported that the cybercriminals used SQL injection attacks and later botnets that 
scanned sites on a large scale looking for SQL vulnerabilities to obtain the 
information. 

Source: http://news.softpedia.com/news/l-2-Billion-Unique-Credentials-500-Million- 
Email-Addresses-Stolen-by-Russian-Cyber-Gang-453677.shtml 

23. August 6, Securityweek - (International) Synology NAS devices hit in ransomware 
attack, firm advises upgrade. Synology stated that it confirmed user reports of 
infections by the SynoLocker ransomware on the company’s Diskstation devices and 
found that Synology network-attached storage (NAS) servers running DSM 4.3-3810 
and earlier were compromised by exploiting a vulnerability that was patched in 
December 2013. Users were advised to upgrade their DSM installations to close the 
vulnerability. 

Source: http://www.securitvweek.com/svnology-nas-devices-hit-ransomware-attack- 
firm-advises-upgrade 

24. August 6, Softpedia - (International) Magnitude Exploit Kit is a well-oiled 
crimeware. Trustwave researchers analyzed the Magnitude Exploit Kit used to infect 
several high-profile Web sites and found that the malware relied on one Internet 
Explorer exploit and two Java exploits, and had a 20 percent infection success rate 
within 1 month, among other findings. 

Source: http://news.softpedia.com/news/Magnitude-Exploit-Kit-Is-a-Well- 
Oiled-Crimeware-453744.shtml 
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25. August 5, Securityweek - (International) Over 90% of enterprises exposed to man-in- 
the-browser attacks: Cisco. Cisco released its Midyear Security Report August 5, 
which found that around 94 percent of its customers have issued domain name system 
(DNS) requests to hostnames with IP addresses associated with the distribution of 
malware that contains man-in-the-browser (MitB) capabilities. The report also found 
that aviation, chemical, pharmaceutical, and media and publishing industries had the 
highest rates of malware encounters, among other findings. 

Source: http://www.securitvweek.com/over-90-enterprises-exposed-man-browser- 
attacks-cisco 



26. August 5, Softpedia - (International) Security flaw in Spotify for Android may 
enable phishing. Trend Micro researchers identified a vulnerability in the Spotify app 
for Android that could allow attackers to take control of what is displayed in the app’s 
interface, which could potentially be used for phishing or redirection to malicious 
pages. Spotify stated that they released an update that closes the vulnerability after 
being notified and advised all users to update to the latest version. 

Source: http://news.softpedia.com/news/Securitv-Flaw-in-Spotifv-for-Android-Mav- 
Enable-Phishing-453633.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 



27. August 5, Santa Rosa Press Democrat - (California) After two-day outage, Internet 
service restored for Mendocino Coast. Cellphone and Internet service on the 
Mendocino Coast was restored August 5 after a reported vehicle accident on 
Comptche-Ukiah Road August 3 that damaged about 400 feet of AT&T fiber optic 
cable causing the outage for residents and businesses. Some recipients of government 
cash and food assistance programs were also impacted as well as some 9-1-1 service 
for residents in the area. 

Source: http://www.pressdemocrat.com/news/2479886-181/after-two-day-outage- 
intemet- service 



28. August 5, WHO 13 Des Moines - (Iowa) Phone outage costs some customers 
business. Crews fixing a water main break cut phone lines August 1 causing a 
disruption of Internet and phone service for Century Link businesses in Des Moines. 
The utility worked August 5 to restore service. 

Source: http://whotv.com/2014/08/05/phone-outage-costs-some-customers-business/ 
For another story, see item 25 
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Commercial Facilities Sector 

29. August 6, WRTV 6 Indianapolis - (Indiana) Prosecutor: ‘Millions' in merchandise 
stolen in theft ring. Federal and State authorities arrested and charged 16 individuals 
in connection with a retail theft ring that allegedly stole millions of dollars’ worth of 
high-end merchandise from 16 Evansville, Indiana retailers, including several stores 
located in the Eastland Mall. 

Source: http://www.theindvchannel.com/news/crime/prosecutors-millions-in- 
merchandise-stolen-in-theft-ring 71159873 

30. August 6, WDTN 2 Dayton - (Ohio) Walmart shooting suspect identified. Police 
fatally shot a suspect inside a Walmart store in Beavercreek, Ohio, August 5 after the 
man who reportedly brandished a gun and threatened customers failed to comply with 
verbal orders from authorities. The store evacuated and reopened August 6, while 
authorities reported a second victim died from a medical collapse during the incident. 
Source: http://wdtn.com/2014/08/06/police-officer-shot-and-killed-walmart-suspect/ 

31. August 6, WRAL 5 Raleigh - (North Carolina) 20 displaced by Raleigh condo fire; 2 
firefighters injured. Investigators believe improperly discarded smoking material 
sparked an August 6 fire at a Raleigh condominium that damaged 12 units and left 20 
residents displaced. Two firefighters were transported to an area hospital with minor 
injuries. 

Source: http://www.wral.com/20-displaced-by-raleigh-condo-fire-2-firefighters- 
injured/1 3869955/ 

32. August 5, Lafayette Journal and Courier; Associated Press - (Indiana) Witness: 
Jealousy behind Monticello plant shootings. Authorities responded to the Jordan 
Manufacturing Co. Inc., facility in Monticello August 5 after receiving reports that a 
man shot two employees in the parking lot of the factory before turning the gun on 
himself, leaving all three individuals dead. 

Source: http://www.indvstar.com/storv/news/crime/2014/08/05/police-shots-fired- 
monticello-plant/1 3629825/ 

33. August 5, Athens Banner-Herald - (Georgia) Downtown businesses flood as broken 
water main turns College Avenue into a river. A 12-inch water main beneath an 
Athens, Georgia sidewalk ruptured August 5, flooding the basements of several 
structures with up to 4 feet of water and prompting the evacuation and temporary 
closure of several stores and restaurants. Crews shut off the main and shifted customers 
to a new main restoring water service. 

Source: http://onlineathens.com/breaking-news/2014-08-05/downtown-businesses- 
flood-broken-water-main-tums-college-avenue-river 

34. August 5, Washington Post - (Washington, D.C.) Chief orders D.C. club where actor 
was stabbed closed for 96 hours. Washington D.C. police ordered Cafe Asia in 
Washington, D.C. to close for 96 hours beginning August 4 due to concerns that 
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security guards inside the nightclub failed to aid in containing an aggressive crowd that 
interfered with officers trying to secure the scene of two unrelated altercations August 
3. One individual was injured after a suspect punched, kicked, and stabbed the man 
with a knife during one of the incidents. 

Source: http://www.washingtonpost.com/local/crime/lanier-orders-downtown-dc-club- 
where-actor-stabbed-closed-for-96-hours/2014/08/05/713c2dfa-lc91-l Ie4-ae54- 
0cfelf974f8a story.html 

For additional stories, see items 27 and 28 
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Dams Sector 

35. August 5, Associated Press - (Oregon; Washington) Corps of Engineers agrees to 
disclose dams’ pollution. The U.S. Army Corps of Engineers announced August 4 that 
it will disclose the amount of pollutants being released into waterways among 8 dams 
on the Columbia and Snake rivers in Oregon and Washington as well as apply to the 
U.S. Environmental Protection Agency for pollution permits to settle Columbia 
Riverkeeper claims that they violated the Clean Water Act. The Corps did not admit 
any wrongdoing and will pay $143,000 in fees. 

Source: http://registerguard.com/rg/news/local/31967790-75/corps-of-engineers- 
agreesto-disclose-dams-pollution.html.csp 

36. August 5, Contra Costa Times - (California) Oakley canal work promises water 
quality, safety improvements. A 5-stage canal project in Oakley conducted by Contra 
Costa Water District that began in 2008 is in its second phase expected to be completed 
by May 2015 which will save water and provide customers with a fresher supply of 
water safely once the project is finished. 

Source: http://www.contracostatimes.com/east-county-times/ci 26275004/oakley- 
canal-work-promises-water-quality-safety-improvements 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
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